This Privacy Policy explains how Assessment Questionnaires processes personal data where it acts as a controller, including account administration, support, service communications, security, billing, and website use.
Controller and processor roles
For account, billing, support, security, and website information, Assessment Questionnaires acts as the data controller. For assessment questionnaire responses, assessment records, uploaded attachments, generated background information, and related report data, Assessment Questionnaires normally acts as a processor on behalf of the assessor or organisation that created the assessment.
The assessor or organisation is responsible for deciding why assessment data is collected, what is collected, how it is used, who it is shared with, and how long it should be retained.
Personal data we process as controller
- Account details, such as name, email address, organisation, and role.
- Authentication, access, and security logs.
- Support requests and service communications.
- Billing and administrative records where applicable.
- Limited website and service usage information used to operate and secure the service.
Assessment data processed on behalf of customers
Assessment questionnaire responses may include information about a child or adult learner, parents or carers, school staff, educational history, developmental history, health-related information, family learning history, and other information relevant to an assessment. This information is processed on behalf of the assessor or organisation using the platform.
Lawful bases
Where we act as controller, we rely on lawful bases including contract, legitimate interests, legal obligation, and consent where appropriate. Where we act as processor, the customer is responsible for identifying the lawful basis and any special category condition that applies to their assessment processing.
Sharing and subprocessors
We use trusted service providers to host, secure, maintain, and communicate through the platform. These providers process data only as needed to provide their services to us. A current subprocessor summary is available on the Subprocessors page.
Retention
We retain controller data for as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, and maintain security. Assessment data processed on behalf of customers is retained according to the customer’s instructions, platform settings, and applicable contract terms.
Your rights
Depending on the circumstances, you may have rights to access, rectify, erase, restrict, or object to processing of your personal data. If your request relates to assessment data, we may need to refer it to the assessor or organisation that controls that data.
Contact
For privacy queries relating to this platform, contact the organisation that provided your assessment link or your platform administrator. If you operate an organisation on the platform, contact platform support using your usual support channel.